squid2_enrichment_without_profiler.json

{
	"enrichment": {
		"fieldMap": {
			"hbaseEnrichment": [
				"full_hostname"
			],
			"geo": [
				"ip_dst_addr"
			]
		},
		"fieldToTypeMap": {},
		"config": {}
	},
	"threatIntel": {
		"fieldMap": {
			"hbaseThreatIntel": [
				"full_hostname"
			]
		},
		"fieldToTypeMap": {
			"full_hostname": [
				"zeus"
			]
		},
		"config": {},
		"triageConfig": {
			"riskLevelRules": [],
			"aggregator": "MAX",
			"aggregationConfig": {}
		}
	},
	"configuration": {}
}